Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/880B8A42F38311EA8916FB7FF8AEA228.roa
File: 880B8A42F38311EA8916FB7FF8AEA228.roa (raw, json)
Hash identifier: lmRb0RsJPjiLTVQ/pQ6Vn2QuBVNUm1W2KaA/grF9eyg=
Subject key identifier: F7:9A:91:F6:9C:4E:96:E1:F5:CB:0E:17:FF:43:9B:EA:71:A5:E4:F7
Certificate issuer: /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial: 025D
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/880B8A42F38311EA8916FB7FF8AEA228.roa
Signing time: Thu 10 Sep 2020 16:34:44 +0000
ROA not before: Thu 10 Sep 2020 16:34:39 +0000
ROA not after: Tue 10 Sep 2030 16:34:39 +0000
asID: 327687
IP address blocks: 196.43.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 605 (0x25d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Validity
Not Before: Sep 10 16:34:39 2020 GMT
Not After : Sep 10 16:34:39 2030 GMT
Subject: CN=5f5a55a4-8ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9a:87:ac:80:2f:6b:1b:b8:a1:00:da:79:dc:
b0:07:b5:f6:94:f6:59:c4:0d:73:53:eb:61:0b:d6:
b9:00:52:dc:5f:6a:9d:58:e8:e3:ca:bf:e5:96:ac:
e4:91:bd:f8:88:6e:46:47:bb:4f:fc:1b:b9:11:3b:
81:79:5c:50:01:46:d2:16:20:35:33:7f:d3:99:0f:
5e:99:af:7d:39:f5:0d:ae:26:0a:62:a4:5a:4b:b8:
aa:19:36:b0:14:39:d9:12:11:6c:65:7c:96:71:68:
ef:00:a7:26:57:18:a6:36:85:9b:59:13:29:d9:4a:
29:79:31:42:a2:ad:eb:49:cb:9c:0b:e3:52:c0:23:
e9:3b:9c:e2:01:f3:4c:0b:fa:75:1f:d6:9f:a4:a4:
bc:36:63:d2:d2:5b:eb:ca:2d:4c:d0:f9:34:82:89:
b7:22:9f:a8:ac:b6:5d:42:0c:69:f8:91:26:06:b7:
dd:0b:b3:49:51:2d:41:9f:a4:59:cc:1f:8b:77:49:
57:c9:04:c2:52:bf:2d:b1:bc:e5:70:6b:4d:ee:af:
35:47:ff:f3:14:7e:fa:dd:44:44:35:fa:fb:d7:8b:
60:da:4a:44:27:d3:a0:aa:04:26:2e:ae:34:68:24:
b5:2e:2d:5b:9a:c8:bc:4c:40:a0:8a:5f:23:6a:f5:
c9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9A:91:F6:9C:4E:96:E1:F5:CB:0E:17:FF:43:9B:EA:71:A5:E4:F7
X509v3 Authority Key Identifier:
keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/880B8A42F38311EA8916FB7FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.43.151.0/24
Signature Algorithm: sha256WithRSAEncryption
29:bb:5e:23:aa:25:3e:20:10:21:9f:8b:5a:a7:6f:56:f6:37:
65:14:55:44:a0:1d:2c:53:5a:25:ca:21:ba:43:7c:29:89:c7:
0d:a4:ed:53:b6:ea:6f:3f:3c:c9:17:4a:87:af:2f:d4:5a:15:
98:5c:3f:55:d2:c1:83:64:24:22:4c:1c:fe:51:be:3b:0c:ff:
48:6e:6b:51:4c:20:82:ce:2f:01:00:33:83:cd:54:f2:4c:87:
5c:c7:a1:d2:a4:a1:9b:05:91:da:80:ad:0e:84:60:dd:56:c2:
2b:f4:3e:f7:f5:37:46:42:70:34:28:5a:7f:e7:24:a4:52:d0:
4f:d8:c8:0a:72:21:00:fa:9b:16:5b:67:82:3d:28:2c:45:1f:
23:38:10:ad:98:ef:ef:98:fc:f0:5d:94:48:80:6d:0e:3a:41:
f1:4e:dd:af:96:5f:ac:07:71:4f:64:f2:83:e9:7a:13:90:bc:
03:fa:5d:a4:fb:95:37:a2:a5:2d:ed:de:ad:39:e6:14:dc:38:
17:62:b2:3f:c3:41:d3:a0:5d:af:17:49:00:8a:8c:ed:56:8a:
18:10:2a:4a:64:9c:2b:50:a0:8f:58:b8:d6:f9:7c:be:97:c2:
54:24:bb:e3:5b:c7:c7:9e:6e:7a:a0:ab:ca:9e:6e:d7:cb:9d:
e0:ba:18:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:44:26 2024 by rpki-client on console-ams.rpki-client.org